ntp-keygen(1) User Commands ntp-keygen(1) (NAME) ntp-keygen - NTP (SYNOPSIS) ntp-keygen [-flags] [-flag [value]] [--option-name[[=| ]value]] . (DESCRIPTION) NTPv4 . OpenSSL Autokey . / (challenge/response) . NTPv3 . ASCII PEM MIME . . ASCII MD5 . OpenSSL SHA1 AES-128-CMAC . NTP . NTP ntpq(1) ntpdc(1) . OpenSSL (PKI) . X509v3 . Autokey . . -p -q . hostname(1) ( DNS ) . ntp-keygen . . pw crypto ntpd(1) . . . ntpd(1) . . . ntp.keys /etc . /usr/local/etc NFS . NFS /etc keysdir ntpd(1) . stderr stdout (pipe) (redirect) . ntpkey* Cryptographic Data Files ..SS " (Running the Program)" ntp-keygen (root) . keys ( /usr/local/etc) . Autokey keys ( /usr/local/etc) . ntpkey* ntp-keygen RSA RSA-MD5 . . . RSA . . RSA DSA . (message digest) MD5 OpenSSL AES128CMAC MD2 MD5 MDC2 SHA SHA1 RIPE160 . (scheme) . RSA SHA SHA1 DSA . / OpenSSL . X509v3 . Autokey . su(1) OpenSSL (random seed) .rnd . .rnd RANDFILE OpenSSL .rnd . NFS NFS . NFS /etc keysdir ntpd(1) . Autokey . (TA) . (subject name) (trusted name) hostname . subject issuer . . /usr/local/etc NFS . . . / . . hostname filestamp NTP . . . ntpd(1) filestamp . ntpd(1) filestamp . . ntp-keygen filestamp / . . (TH) ntp-keygen -T . TH . (certificate trail) Autokey TH . TH . RSA . . -S RSA DSA . MD5 OpenSSL -c . (proventic filestamps) . . . . "Autokey Public-Key Authentication" . ntpkey_ _hostname. filestamp hostname ( hostname(1) ) filestamp NTP . rm ntpkey* rm *filestamp . ..SS " (Trusted Hosts and Groups)" cryptotype Authentication Options ntp.conf(5) . cryptotype RSA MD5 TC . NTP stratum . . . . Automatic NTP Configuration Options ntp.conf(5) . root . ntpkey . ntp-keygen -T . -T . NTP stratum . Autokey . / ntp-keygen -S type type RSA DSA . DSA . ntp-keygen -c scheme scheme . ntp-keygen . . ntp-keygen . ntpd(1) . ntpd(1) . . (Identity Schemes) Autonomous Authentication TC . PC IFF GQ MV . TA . TA . (subject) (issuer) . TA . . . . . PC . alice ntp-keygen -P -p password ntpkey_ RSA key_alice. filestamp ntpkey_ RSA-MD5 _ cert_alice. filestamp . . bob ntpkey_host_bob ntpkey_cert_bob . bob alice . . IFF TC IFF . alice ntp-keygen -T -I -p password ntpkey_IFFpar_alice.filestamp . ntpkey_iff_alice . . IFF . . . alice ntp-keygen -e (pipe) . . ntpkey_iff_alice . . GQ TC IFF . alice ntp-keygen -T -G -p password ntpkey_GQpar_alice.filestamp . ntpkey_gq_alice . bob ntpkey_gq_bob . GQ GQ . MV TC . trish TA alice bob . TA trish ntp- keygen -V n -p password n ( ) ntpkeys_MVpar_trish.filestamp ntpkeys_MVkeyd _ trish. filestamp d (0 < d < n). alice ntpkey_mv_alice . alice . alice . alice . bob ntpkey_mvkey_bob . MV ..SS " (Command Line Options)" -b --imbits= modulus modulus . ( ) . . -c --certificate= scheme / (message digest) . scheme : RSA-MD2, RSA-MD5, RSA-MDC2, RSA-SHA, RSA-SHA1, RSA-RIPEMD160, DSA-SHA, DSA-SHA1. RSA RSA DSA DSA . RSA-MD5 . FIPS 140-2 DSA-SHA DSA-SHA1 . -C --cipher= cipher OpenSSL . Triple DES CBC des-ede3-cbc . openssl -h OpenSSL . -d --debug-level (debugging verbosity) . . -D --set-debug-level= level level . . -e --id-key IFF GQ IFFkey GQkey stdout . . -G --gq-params GQ Guillou-Quisquater (GQ) . -I -V ( ). -H --host-key / RSA . -I --iffkey IFF Schnorr (IFF) . -G Fl V ( ). -i --ident= group Autokey group . IFF, GQ, MV . . -i -s `@@' host @@ group crypto ident server ident ntpd . -l --lifetime= days days . ( ) . -m --modulus= bits (prime modulus) bits . ( ) . . -M --md5key .TP 7 -T --trusted-cert (trusted). (non-trusted) . -V --mv-params nkeys nkeys Mu-Varadharajan (MV). -I -G () . : . (Random Seed File) (entropy seed) . OpenSSL . NTP ntp-keygen . OpenSSL OpenSSH . . . OpenSSL . OpenSSL .rnd NTP ntp-keygen . NTP randfile crypto . ntp-keygen OpenSSL RANDFILE (root) . RANDFILE .rnd . ntp-keygen ntpd(1) (root) /.rnd /root/.rnd . . (Cryptographic Data Files) . (filestamp) : ntpkey_key _ name. filestamp key name filestamp ( NTP) . key key . . date . `#' () ntp-keygen ntpd(1) . ASN.1 PEM ASCII MIME . ntp.keys . . # ntpkey_MD5key_bk.ntp.org.3595864945 # Thu Dec 12 19:22:25 2013 1 MD5 L";Nw<`.Il0%XXK9O'51VwV . . : keyno type key keyno type (message digest) OpenSSL MD5 MD5 OpenSSL FIPS 140-2 SHA SHA1 key ASCII : 0x21 0x7e ( `'! `~' ) `#' `#' . OpenSSL ASCII . ntpq(1) ntpdc(1) ASCII . ntp-keygen ntpkey_MD5key_hostname. filestamp . (root) . NTP ntp.keys ntp-keygen (soft link) . . Autokey Version 2 ntpq(1) ntpdc(1) ..SH " (OPTIONS)" -b imbits, --imbits=imbits . . imbits : 256 2048 . 512 . -c scheme, --certificate=scheme . scheme : RSA-MD2 RSA-MD5 RSA-MDC2 RSA-SHA RSA-SHA1 RSA- RIPEMD160 DSA-SHA DSA-SHA1. / . RSA RSA DSA DSA . RSA-MD5 . -C cipher, --cipher=cipher . . triple DES CBC "-C des-ede3-cbc". openssl "openssl -h" . -d, --debug-level . . -D number, --set-debug-level=number . . . -e, --id-key IFF GQ. IFF GQ . . -G, --gq-params GQ. GQ . -H, --host-key RSA. . -I, --iffkey IFF. IFF . -i group, --ident=group Autokey. Autokey . IFF GQ MV . . -i/--ident -s/--subject-name '@@' host@@group 'crypto ident' 'server ident' ntpd . -l lifetime, --lifetime=lifetime . . lifetime . -m modulus, --modulus=modulus . . modulus : 256 2048 . 512 . -M, --md5key . . -P, --pvt-cert PC. . . -p passwd, --password=passwd . DES-CBC . "crypto pw password" ntpd . . -q passwd, --export-passwd=passwd IFF GQ . IFF GQ DES-CBC . "crypto pw password" ntpd . --id-key (-e) . -s host@group, --subject-name=host@group . Autokey '@@' . . host@@group . -i group @@group . IFF GQ MV . -S sign, --sign-key=sign (RSA DSA). . . -T, --trusted-cert ( TC). . . -V num, --mv-params=num MV. . Mu-Varadharajan (MV). -v num, --mv-keys=num MV. . . -?, --help . -!, --more-help . -> [cfgfile], --save-opts [=cfgfile] cfgfile. OPTION PRESETS . . -< cfgfile, --load-opts=cfgfile, --no-load-opts cfgfile. no-load-opts config/rc/ini . --no-load-opts . --version [{v|c|n}] . `v` . `c` `n` . not presettable () (<> <<.INI>>) : NTP_KEYGEN_ NTP_KEYGEN ( ). homerc <<$HOME>> <<.>>. .ntprc . (USAGE) (ENVIRONMENT) (OPTION PRESETS) . (FILES) (OPTION PRESETS) . (EXIT STATUS) : 0 (EXIT_SUCCESS) . 1 (EXIT_FAILURE) . 66 (EX_NOINPUT) . 70 (EX_SOFTWARE) libopts . autogen-users@lists.sourceforge.net . . (AUTHORS) The University of Delaware Network Time Foundation (COPYRIGHT) (C) 1992-2024 The University of Delaware Network Time Foundation . NTP . (BUGS) . http://bugs.ntp.org . : https://bugs.ntp.org, bugs@ntp.org . (NOTES) FreeBSD . AutoGen ntp-keygen . ntp (4.2.8p18) 25 May 2024 ntp-keygen(1)